Courses

NetWitness Administration Training

This two-day course will focus on installation and configuration of NetWitness products. The class will cover hands-on installation, troubleshooting methodology, and advance configuration.

Course Outline

Introductions
Technology Overview
Product Overview
DEPLOYMENT CONSIDERATIONS
INSTALLATION
- Installation of Decoder/Concentrator/Informer
- Upgrade process/Rollback
- Licensing
- Datarecovery procedures
  - NwDataReset (ALL, concentrator only, index only, reaggregation, reindex, etc)
- Admin Tool
- Management (User Account creation)
ADVANCED CONFIGURATION
How to configure and implement
- GeoIP Overrides
- Threat Feeds
TROUBLESHOOTING AND MAINTENANCE
- Trouble shooting Processs (decoder/concentrator/informer)
- Parser analysis (consuming too much memory)
- Logs analysis
- Index profile: identify issues (good/bad) profiles
SIEM integration
Hands on Exercises